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Description 

Method for displaying calibration-required data 



In measurement systems in production, goods distribution or 
other plant measured value recorders and measured value 
5 displays are generally distributed across the plant, with the 
measured values or measurement data being transmitted from the 
measured value recorders to the measured value displays . The 
measurement data is increasingly displayed using freely- 
programmable PCs. In addition the measurement data is included 

10 as a rule for the control of the plant. By contrast with 

measuring devices in which the measured value recorder and the 
measured value display are integrated into one device, 
software, i.e. data transmission and processing have a 
prominent role to play in measurement systems. This is taken 

15 into account in the Guidelines 7.1 of the European Cooperation 
in Legal Metrology (WELMEC) : "Software Requirements on the 
Basis of the Measuring Instruments Directive" dated October 
1999 (www.welmec.org/publications/7-l.pdf) in relation to the 
transmission and display of calibration-required data. One of 

20 the proposals in this document is that calbration-required data 
which is transmitted over a non- encapsulated transmission path, 
for example a network, should be encrypted to protect it from 
manipulation. To ensure the authenticity of the data when it is 
received, the address of the relevant sender can be transmitted 

25 together with the data. Additionally combining the calibration- 
required data to be transmitted with a time stamp enables the 
currency of the data to be checked on receipt. In relation to 
the display of the calibration-required data on a PC with a 
Windows interface there is a requirement for the data to be 

30 presented in a window which is automatically always moved into 
the foreground and cannot be covered by other windows, for the 
calibration-required data to be presented in the window in a 
form which cannot be confused with the other windows, and for 
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the window which displays the calibration-required data to be 
administered by a calibration-required part of the program, 
that is a part of the program protected from deliberate changes 
by means of widely-used software tools (text editors) . 

5 The object of the invention is to specify a predictable method 
for displaying calibration-required data which satisfies the 
above-mentioned WELMEC requirements. 

In accordance with the invention the object is achieved by 
displaying the calibration-required data by means of an 

10 industry visualization system which can be planned using 
predetermined project planning software and has a standard 
interface to incorporate further applications, with the 
calibration-required data being transmitted to the 
visualization system with its integrity ensured and being 

15 visualized via one of the applications incorporated into the 
standard interface in a way other than that provided by the 
presentation options able to be planned via the project- 
planning software. 

Industry visualization system here is taken to mean an 
20 operation and monitoring device or HMI (Human Machine 
Interface) device as is used in particular in process 
automation systems. Functions, switches or process values are 
visualized on a so-called operator or touch panel. With the aid 
of this visualization processes, error messages or process 
25 values can be displayed in an easy-to-understand way to the 
viewer. Recording the processes visually, for example in the 
form of process images, makes operation easier for the user. 
The visualization system can be connected via a data connection 
to the process automation system and allows project-specific 
30 function keys, buttons or display elements to be used to 
influence the project. The visualization system is planned 
using prespecified project planning software which enables 



2002P19099WOUS / PCT/DE0303859 

3 

ideas to be converted simply and rapidly into simple and easy- 
to-understand images for the visualization system without the 
user having to have any specific program knowledge to perform 
these operations. To allow an open visualization system to be 
5 achieved while retaining ease of project planning, this system 
has one or more standard interfaces. Examples are for graphics 
import of BMP, WMF, TIF images, for data exchange DDE, ODBC, 
RAS and for the Integration of applications OLE and ActiveX. 
These interfaces provide a simple method of exchanging data 

10 between individual software products. ActiveX for example 

(previously also known as OCX-OLE Custom Control) allows ready- 
made application components to be incorporated into another 
application, for example into a visualization system. Process 
visualization can thus be enriched by functionalities for which 

15 there is no provision in the project planning software. The 
method in accordance with the invention advantageously uses a 
standard interface of an industry visualization system, 
allowing an application to be incorporated into the 
visualization system via this interface with which the 

20 calibration-required data with ensured integrity can be 

visualized in a form complying with the WELMEC guidelines . 

If the calibration-required data is transmitted within a plant 
which counts as closed, safeguarding its integrity can be 
sufficient to meet the WELMEC requirements. If the transmission 
25 path, as in telephone networks for example, is to be regarded 
as open, encryption of the calibration-required data to be 
transmitted is necessary. In this case the encrypted data is 
decrypted in the visualization system by the application linked 
in via the standard interface. 

30 The encryption of confidential data before transmission to a 
receiver is generally known. In what is known as the public 
encryption method the sender uses a public key of the 
authorized recipient for encryption of the data, so that only 
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this recipient can decrypt the data with his own private key. 
The sender can authenticate the data by signing it. To do this 
the sender encrypts the data with his own private key while the 
recipient uses the sender's public key to decypt the data. Data 

5 encrypted with public keys is not necessarily authentic whereas 
data signed with private keys is not confidential. To establish 
the confidentiality and authenticity data encryption and 
signing can thus be combined, to which end the sender first 
encrypts the data with his own private key and then with the 

10 recipient's public key. This is also possible with the method 
in accordance with the invention. Preferably however the 
calibration-required data is encrypted on the sender side with 
a private key and decrypted on the receiver side with the same 
private key. The private keys are integrated when the send 

15 device, for example a display module, and the receive device, 
in this case the visualization system, are manufactured. To 
finally guarantee the integrity, i.e. the incorruptibility of 
the transmitted data, the transmitter can determined the data 
from a check code which is sent encrypted to the recipient. The 

20 recipient decrypts the check code and compares the check code 
thus decrypted with the check code computed from the received 
data; if the two check codes are the same, the integrity of the 
data is ensured. To enable data coming from different senders 
to be displayed unmistakably on one and the same visualization 

25 system, the address of the relevant transmitter can be sent 
encrypted together with the data and subsequently visualized 
together with the associated data. Additionally combining the 
calibration-required data to be transmitted with a time stamp 
finally enables the currency of the data to be checked on 

30 receipt . 

As already explained the calibration-required data is presented 
on the industry visualization system in a form which cannot be 
planned with the project planning software. This can occur in 
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that the calibration-required data is visualized in a display 
area of the visualization system not accessible to the project 
planning software and thus reserved exclusively for display of 
the calibration-required data. Additionally or alternatively 
5 the calibration-required data can be visualized together with 
additional information which cannot be planned by the project 
planning software, for example a typical watermark in the 
background . 

For further explanation of the method in accordance with the 
10 invention reference is made below to the single figure of the 
drawing which shows part of an automation system. 

A process scale (weighing module) 1 is arranged in the 
automation system which communicates via a backplane bus 2 with 
of a CPU module 3 of the automation system. The CPU module 3 is 
15 connected just like an industry visualization system 4 to a 
field bus system 5, e.g. Profibus, of the automation system. 

In the encapsulated weighing module 1 calibration-required 
weighing data generated by a weighing cell not shown in this 
diagram is combined with a designation of the weighing module 

20 1, a time stamp {date, time of day), if necessary further 

parameters and a check code computed from this data to form a 
metadata record and is encrypted with a private key. This 
encrypted metadata record is transmitted via the backplane bus 
2 to the CPU subassembly 3 and stored there together with 

25 unencrypted data in a memory. The unencrypted data can be 

weighing data of the weighing module, provided this weighing 
data is not intended for calibration-required applications, 
i.e. it is included for example for control purposes within the 
automation system. 



30 To present the calibration-required weighing data the encrypted 
data set is transmitted via the unencapsulated field bus system 
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5 to the industry visualization system 4. This can be included 
in the project via a project planning interface by means of 
predetermined project planning software which allows specific 
presentations and forms of presentation. The industry 
5 visualization system 4 further features a standard interface 
for incorporating further applications into the industry 
visualization system 4, e.g. ActiveX-elements in this instance. 
Such ActiveX elements are used to decrypt the data record, with 
the same private key being used as in the weighing module 1. 

10 The ActiveX element, by comparing the decrypted check code with 
the check code computed from the received data, checks the 
integrity of the data and displays the weighing data and the 
designation of the associated weighing module 1 on a display 6 
of the industry visualization system 4. In this case the data 

15 is presented in a form which could not be planned in the 

project planning software. This is done for example in a window 
7 which cannot be covered by other windows and of which the 
background displays a unique watermark 8, e.g. fine wavy lines. 
The decrypted data is not available as internal variables, so 

20 that they can also not be modified and can be presented in the 
same way. 



